Cloudflare reports 18.2 million L3 DDoS attacks in Q3
That is about 8,226 network-layer attacks an hour, up from 13.2 million in Q2, plus 14.4 trillion HTTP DDoS requests.
52
Country
Israel
- Mentions · 7d14
- Mentions · 30d50
- All mentions95
- First seenAug 11, 2026
- Last mentioned2h ago
Timeline
95 articles · newest firstCloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
58
Cloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
58
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
46
Researchers say Discover-Tech ads may track Starlink users
TrendAI says codename SHADOW-EARTH-79 won about 13% of observed Starlink ad bids and was the top bidder in 105 countries.
58
ESET maps APT activity from April through September 2026
China-, Iran-, North Korea- and Russia-aligned groups hit governments, semiconductors, drones, crypto firms and Ukraine.
72
TrendAI says SHADOW-EARTH-79 used ad bidding to track Starlink users
Researchers say the bidder led Starlink ad wins in 105 countries and bought 66,208 Starlink impressions, without confirming malicious code on every impression.
58
Citizen Lab says spyware makers infect devices through online ads
Researchers say Israeli firm Discover-Tech links ad vendors to Candiru and Bindecy zero-click spyware.
72
Ex-Mossad chief says sabotaged devices sit in many countries
Yossi Cohen says the pager method began in 2002–2004 and was not deployed enough in Gaza before October 7, 2023.
32
Discover-Tech accused of tracking Starlink users through online ads
TrendAI found one bidder dominating sampled Starlink ad auctions in 105 countries; the work does not show infection or a Starlink breach.
62
Analyst: AI security point tools will fold into larger platforms
Care says runtime agent decisioning should remain a product while scanning and posture tools become features.
32
Cybersecurity job openings listed for October 27, 2026
Roles span penetration testing, cloud networking, ISSO compliance and SOC 2 work across eight countries.
18
Analyst estimates US fired 609 interceptors defending Israel since 2023
Stephen Semler puts the cost at $11 billion through September 2026, mostly THAAD and SM-3 rounds.
5
Security Affairs issues fifth AI and cybersecurity newsletter
The roundup cites claimed OpenAI data-access incidents, a LiteLLM supply-chain compromise, and about $800 million in UK AI security funding.
22
ICRC tells UN autonomous weapons already amplify wartime harm
Gisel says AI targeting in Gaza and Ukraine speeds lethal decisions and can leave humans out of the loop.
48
Google DeepMind staff resign over military AI contracts
Engineers say this year's Pentagon deals widen classified use with weak oversight; Google says reviews follow its AI principles.
45
Remote defrost attack spoils stock at French supermarket chains
Les Mousquetaires expects losses in the tens of millions of euros, and no ransom demand has surfaced.
74
Cybersecurity job openings listed for October 20, 2026
The roundup spans architect, CISO, cloud, analyst, and penetration-testing roles across several countries.
12
Citizen Lab says AdFection used ads to deliver Candiru spyware
Discover-Tech allegedly helped infect at least 45 Al-Jazeera devices without a victim click.
74
Discover-Tech ads delivered Candiru spyware to Al Jazeera
Citizen Lab says Controlium infected devices when ads rendered, and those ads reached almost 200,000 sites and apps.
78
Israeli settlers attack European diplomatic cars in West Bank beat French mayor
Israeli settlers attacked European diplomatic cars in the West Bank and beat a visiting French mayor.
3
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Citizen Lab says Candiru infected at least 45 Al Jazeera devices through Discover-Tech zero-click ads.
78
Zero-click attacks used targeted ads to deliver Candiru spyware
Citizen Lab says Candiru spyware hit Al Jazeera devices through zero-click malicious ads called AdFection.
76
Here’s What Telegram Giving Data to the U.S. Government Looks Like
Court records show Telegram gave U.S. investigators a user's phone number, ID, and IP address.
48
No click required: How the ad industry became a pipeline for mercenary spyware
Citizen Lab says Discover-Tech used ad auctions to profile devices and deliver Candiru spyware without a click.
74
Targeted ads delivered 0-click exploits to install mercenary malware
Citizen Lab says Discover-Tech ads delivered Candiru zero-click exploits that installed mercenary spyware.
82
The next election influence campaign will target your AI chatbot
VisionHeight says hyperlocal site networks are seeding content to steer AI chatbot answers on U.S. races.
66
Zero-click spyware infecting devices through online ads, researchers say
Citizen Lab says Candiru used Discover-Tech ads to zero-click infect Al Jazeera journalists and reach sensitive government networks.
78
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Citizen Lab says Candiru spyware hit at least 45 Al Jazeera devices via zero-click ads.
82
Hackers Use Online Ads to Infect Devices With Spyware Without a Single Click
Citizen Lab says Candiru spyware reached Al Jazeera devices through zero-click malicious online ads called AdFection.
78
Spyware vendors found a way to make targeted ads even worse
Citizen Lab says Discover-Tech ads delivered Candiru zero-click spyware that infected Al Jazeera devices.
80
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Citizen Lab says Candiru used Discover-Tech ads for zero-click spyware, hitting at least 45 Al Jazeera devices.
82
Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal
Citizen Lab says Candiru spyware reached Al Jazeera devices through zero-click code hidden in online advertisements.
84
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Citizen Lab says Candiru spyware infected Al Jazeera phones through zero-click ads placed by Discover-Tech.
78
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Citizen Lab says Discover-Tech ads delivered Candiru zero-click spyware, infecting Al Jazeera devices.
80
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
Citizen Lab says Candiru and Bindecy used Discover-Tech ads to deliver zero-click spyware, including against Al Jazeera.
82
Spyware manufacturer had access to data harvested by former Polish government, current PM says
Poland says NSO kept control of Pegasus servers and could access data collected from Polish targets.
74
Zenzap raises $44M for its AI chat app that aims to replace WhatsApp in the workplace
Workplace messenger Zenzap raised $44 million for AI chat aimed at replacing WhatsApp at work.
30
Pluto Security raises $42M as AI gives enterprise security teams a new headache
Pluto Security raised $42 million to monitor how employees and AI agents use enterprise AI tools.
46
Cybersecurity jobs available right now: October 13, 2026
Help Net Security lists open cybersecurity jobs for October 13, 2026 across multiple countries.
16
Related CVEs
by mentions- CVE-2026-6606630%9.5Unauthenticated Arbitrary File Read in Ruby on Rails Active Storage
- CVE-2023-20198100%10.0Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)
- CVE-2024-3400100%10.0Unauthenticated Root Command Injection in Palo Alto Networks PAN-OS GlobalProtect
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2024-21887100%9.1Command Injection RCE in Ivanti Connect Secure and Policy Secure
- CVE-2023-46805100%8.2Authentication Bypass in Ivanti Connect Secure and Policy Secure Web Component
- CVE-2023-2027393%7.2Authenticated Command Injection (Root) in Cisco IOS XE Web UI
- CVE-2026-07682%9.8Langflow code Code Injection Remote Code Execution Vulnerability
- CVE-2026-076941%9.8Unauthenticated Eval Injection RCE in Langflow (eval_custom_component_code)
- CVE-2026-502736%8.8Authenticated Path Traversal Arbitrary File Write in Langflow Files API
Appears with
- Googlevendor · 16
- Citizen Laborganization · 15
- Googleorganization · 15
- Candiruthreat actor · 14
- Al Jazeeravictim · 13
- IAB Europeorganization · 12
- Controliumproduct · 11
- Discover-Techorganization · 11
- Candirumalware · 8
- Confiantorganization · 8
- Beeswaxorganization · 8
- Al Jazeeraorganization · 8
- Discover-Techvendor · 7
- Dark Cartographerthreat actor · 6
- Discover-Techthreat actor · 6
- Eskimiorganization · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.